github-actions

SUSPICIOUS. The core capabilities mostly match a GitHub Actions generation skill, and data flows are largely to expected official CI/CD providers. The main concerns are autonomous execution without confirmation, optional writes outside the repo for telemetry, and moderate supply-chain risk from third-party or mutable GitHub Actions references. No strong signs of credential theft, covert exfiltration, or fundamentally incompatible behavior were found.